how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.1s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 2918.8518473 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 909229
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 213f332174821857 · signed
- clock skew
- 1.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- b3cfca55c6c0bd22dc30aa9a07f7c13b0dc86eb2f0b19902649799261f63da00
- transaction
- f1710cb4bb8c73f50bb10fdc7a6c94c95e60b1ea16e94547cb7b9c5ec00e28a9
the receipt
- entry
- 2942 of 7454
- previous entry
- ac95c3c9f982134d9ac8e5fea1609d22a5b621644cd21333442886914e070c63
- leaf hash
- 197868b10b9a3246b9a7931cd37e013c919e5a9576b2db51a349031810630536
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 3UK5H+46jy3BJsxmiBklKGQIfVC36955+8vnEnMRvaBhDfmBcveZ3qQACrte3Qqybm5CLCpVzaBpWDsGmIxTDQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 87b265f924…75a999
0rightcbf8d3b3e53b0fd921…6a27cb79e3
1left7cb7a7444bfc4b2dd6…3e5581c23e
2left029f20c438105a3103…3eee1098e5
3left29e16b3abaf710d114…78afd04a80
4left99cb83e918eed71f1a…1da2418047
5lefte5cb39af5ff5862ce7…9701878afa
6left5b58579b863346a3e1…585815dea8
7rightc2c09f138bffdbb123…607bc7161c
8leftaab6f46529b6997a69…7c0dd61c4d
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right26e5cf1eb0f05b3876…ddd0f71af1
root
87b265f92406df8f29be053a372bc03d1463b0cc616dd02049a4f8875675a999